From ed86c64f1ea3a523b560eb698a66cb1969c84a0c Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Sun, 18 Nov 2018 10:47:57 +0100 Subject: [PATCH] Also restrict "ganeti/kvm host" purpose --- modules/ferm/templates/me.conf.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/ferm/templates/me.conf.erb b/modules/ferm/templates/me.conf.erb index 1dfbe96a7..1bf1279ad 100644 --- a/modules/ferm/templates/me.conf.erb +++ b/modules/ferm/templates/me.conf.erb @@ -7,7 +7,7 @@ nodeinfo = scope.lookupvar('site::nodeinfo') out = [] -restricted_purposes = ['kvm host', 'central syslog server', 'puppet master', 'jumphost', 'buildd', 'static-mirror', 'anycast mirror'] +restricted_purposes = ['kvm host', 'ganeti/kvm host', 'central syslog server', 'puppet master', 'jumphost', 'buildd', 'static-mirror', 'anycast mirror'] restrict_ssh = %w{tchaikovsky draghi adayevskaya} if (nodeinfo['ldap'].has_key?('purpose')) then -- 2.20.1